Received this from Sophos that installed on one of our Win XP Office PCs today and I honestly have no idea what it is.

'User: xxxxxxxxx\xxxxxxxxxxxxx'
Machine: XXXXXXXXXXX

Process "c:\WINDOWS\is-2PTSU.exe" exhibiting suspicious behavior pattern 'HIPS/ProcMod-004'.
No action taken.
If you are unsure whether the application can be authorized, please send a sample to Sophos.

Now to strangeness......

On Win XP PC file listed does not seem to exist. Not there ......

Ole reliable Mr Google gots' nothing.....zilch. nada....on this file name.....I mean not even one single listing....

Part of me sez just ignore and go one with life, but other.......So any ideas?

6 Replies

"Runtime behavior alerts of this type inform the user that a suspicious-looking program has attempted to start a system process. Any unauthorized attempt at this behavior could indicate a malware infection."